I think the last check belongs only into the `UntrustedMode` case, to make that check correct and to allow arbitrary selections in trusted mode.